126 matches found
CVE-2023-0585
The CVE-2023-0585 entry concerns the WordPress All in One SEO Pack plugin, affected up to version 4.2.9. The root cause is insufficient input sanitization and output escaping that enables Stored Cross-Site Scripting (XSS). The attack requires Administrator privileges and user interaction, allowin...
CVE-2023-0585
The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Administrator role or above...
SUSE CVE-2005-0585
Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...
SUSE CVE-2009-0585
Integer overflow in the soupbase64encode function in soup-misc.c in libsoup 2.x.x before 2.2.x, and 2.x before 2.24, allows context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation...
SUSE CVE-2014-0585
Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code by leveraging an...
Amazon Linux 2022 : wireshark (ALAS2022-2022-226)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-226 advisory. - NULL pointer exception in the IPPUSB dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture file CVE-2021-39920 - NULL pointer exception in the...
Security Updates for Microsoft Word Products C2R (January 2019)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability...
Security Updates for Microsoft Office Products C2R (January 2019)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current...
Debian DLA-2967-1 : wireshark - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2967 advisory. Multiple security vulnerabilities have been discovered in Wireshark, a network traffic analyzer. An attacker could cause a denial of service infinite loop or...
Security fix for the ALT Linux 9 package wireshark version 3.6.2-alt1
3.6.2-alt1 built March 29, 2022 Anton Farygin in task 295752 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...
Wireshark 3.6.x < 3.6.2 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.2 advisory. - Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of servi...
Wireshark 3.6.x < 3.6.2 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 3.6.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-3.6.2 advisory. - Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial...
openSUSE: Security Advisory for wireshark (openSUSE-SU-2022:0722-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLED15 / SLES15 Security Update : wireshark (SUSE-SU-2022:0722-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0722-1 advisory. - Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service...
openSUSE 15 Security Update : wireshark (openSUSE-SU-2022:0722-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0722-1 advisory. - Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or...
SUSE-SU-2022:0722-1 Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop bsc1195866 - CVE-2022-0585: Large loops in multiple dissectors bsc1195867 - CVE-2022-0583: PVFS dissector crash bsc1195868 - CVE-2022-0582: CSN.1 dissector crash...
OPENSUSE-SU-2022:0722-1 Security update for wireshark
This update for wireshark fixes the following issues: Update to Wireshark 3.6.2: - CVE-2022-0586: RTMPT dissector infinite loop bsc1195866 - CVE-2022-0585: Large loops in multiple dissectors bsc1195867 - CVE-2022-0583: PVFS dissector crash bsc1195868 - CVE-2022-0582: CSN.1 dissector crash...
Security fix for the ALT Linux 10 package wireshark version 3.6.2-alt1
3.6.2-alt1 built Feb. 28, 2022 Anton Farygin in task 295750 Feb. 21, 2022 Anton Farygin - 3.6.2 Fixes: CVE-2022-0586, CVE-2022-0585, CVE-2022-0583, CVE-2022-0582, CVE-2022-0581...
CVE-2022-0585
Wireshark is affected by CVE-2022-0585 due to large loops in multiple protocol dissectors, leading to denial of service via packet injection or crafted capture files. Affected versions include 3.6.0–3.6.1 and 3.4.0–3.4.11. Several connected advisories confirm the issue and note fixes in newer pac...
